The Hacker News

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections ...

Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.
Cyber Security News

Node.js Fixes 16 Security Flaws That Could Expose TLS Private Keys and Crash Servers Remotely

Node.js patched 16 flaws in versions 22.x, 24.x and 26.x. Some can leak TLS private keys or crash servers. Here is what to ...
cyberpress

Node.js Fixes 16 Security Flaws Allowing Hackers to Crash Servers and Leak Sensitive Data

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.